330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f

Sharing

Copy URL Twitter E-mail

General

Target
330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f
Size 52KB
Sample260910-pr7z7scl31
SHA256 330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f
MD5 b0c83be211fe6968b877ca2dbc866f3c
SHA1 88ce0bdb01f687471a3789d8809f796552c69dc7
SHA512 03c5ff840df0e43b5c233a7e5d4127f66447439f991e704608b95f30d29abf6fc20aa2e7fc8688bf74f7bd2518007cf94b3971722c8489bfa686e7a6060d00f9
SSDEEP 1536:bZZ+VlmoSWVAj6JtoBscbJx/ydOec+NU/4PC:bZZ+9Sia6gB7x/yJc+GAP
TLSH
T17D339E56F534D837D5B6227AD0287F37EBFAAC24003CD943D3A46D9E4D660A3D12A287
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f

File Explorer

330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f

.exe 52KB

330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f

IMPHASH b9adc0bd08fa072c9d502bf5dc5be92f
SHA256 330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f
MD5 b0c83be211fe6968b877ca2dbc866f3c
SHA1 88ce0bdb01f687471a3789d8809f796552c69dc7
SHA512 03c5ff840df0e43b5c233a7e5d4127f66447439f991e704608b95f30d29abf6fc20aa2e7fc8688bf74f7bd2518007cf94b3971722c8489bfa686e7a6060d00f9
SSDEEP 1536:bZZ+VlmoSWVAj6JtoBscbJx/ydOec+NU/4PC:bZZ+9Sia6gB7x/yJc+GAP
TLSH
T17D339E56F534D837D5B6227AD0287F37EBFAAC24003CD943D3A46D9E4D660A3D12A287
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6006

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathCombineW StrStrIW

dbghelp

SymGetModuleBase64 StackWalk64 SymFunctionTableAccess64 MiniDumpWriteDump

user32

SetFocus PeekMessageW GetThreadDesktop GetWindow WaitMessage SendMessageW DispatchMessageA FindWindowExW SetLayeredWindowAttributes EnumChildWindows GetDesktopWindow SetWindowLongW SetClassLongW GetClassLongW GetWindowInfo GetParent PostMessageW OpenDesktopA ScreenToClient SetWindowsHookExW GetUserObjectInformationA SetThreadDesktop UnhookWindowsHookEx ActivateKeyboardLayout GetMessagePos CallWindowProcW GetCaretBlinkTime EndMenu ReleaseCapture HiliteMenuItem DispatchMessageW FlashWindow IsWindow GetMenuItemCount SwitchDesktop wsprintfW GetCursorPos GetDlgItem GetMenuState GetAncestor GetWindowLongW SetCursorPos InvalidateRect FlashWindowEx TrackPopupMenuEx GetMenuItemRect GetMenu GetCapture MessageBeep GetClientRect FindWindowW MenuItemFromPoint OpenDesktopW CloseClipboard GetPriorityClipboardFormat GetSubMenu SetCapture SetKeyboardState GetMenuItemID FillRect TrackPopupMenu GetSystemMenu ClientToScreen CallNextHookEx GetPropW IsWindowVisible SendMessageTimeoutW SetWindowPos EndDialog BringWindowToTop GetPropA AttachThreadInput SetForegroundWindow DialogBoxIndirectParamW KillTimer IsIconic SetTimer GetClassNameA PrintWindow IsClipboardFormatAvailable WindowFromDC GetClipboardData GetWindowThreadProcessId EmptyClipboard OpenClipboard CountClipboardFormats SetClipboardData CharUpperA OpenInputDesktop ReleaseDC GetDC SetPropA DefWindowProcW RedrawWindow GetDCEx GetWindowDC

kernel32

CreateThread GetNativeSystemInfo Beep VirtualFree Sleep WriteFile OpenProcess GetTickCount GetExitCodeProcess SetEvent CreateMutexW GetHandleInformation SetLastError lstrcpyW GetProcAddress VirtualAlloc OpenFileMappingW GetLastError CreateProcessW UnmapViewOfFile MapViewOfFile GetCurrentProcessId OpenThread ReleaseMutex GetCurrentThreadId lstrcatW GlobalMemoryStatusEx GetLocalTime OpenMutexW FlushFileBuffers CreateFileW GetSystemInfo GetModuleFileNameW lstrcmpiW GetModuleHandleA GetCurrentThread VirtualProtect CreateToolhelp32Snapshot WaitForSingleObject GetCurrentProcess CloseHandle SetUnhandledExceptionFilter LocalFree lstrlenA GetComputerNameA lstrlenW SetErrorMode GlobalLock IsBadWritePtr SetPriorityClass ExitProcess GlobalAlloc lstrcpyA GetCommandLineW RtlUnwind CreateRemoteThread GetCommandLineA VirtualFreeEx TerminateThread lstrcatA ExitThread FlushInstructionCache VirtualAllocEx GetExitCodeThread Module32FirstW OpenEventW IsBadReadPtr Module32NextW WriteProcessMemory SwitchToThread InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar HeapValidate GetProcessHeaps HeapSetInformation HeapCreate HeapAlloc HeapReAlloc HeapFree GlobalUnlock GlobalFree GetModuleHandleW GetVersionExW lstrcmpiA

ntdll

ZwQueryInformationThread RtlImageNtHeader ZwOpenProcess NtQueryVirtualMemory memset ZwQueryInformationProcess RtlCreateUserThread ZwUnmapViewOfSection ZwQuerySystemInformation ZwResumeThread _aulldvrm

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW GetTokenInformation RegQueryValueExW LookupPrivilegeValueW RegCloseKey AdjustTokenPrivileges OpenProcessToken GetSecurityDescriptorSacl RegOpenKeyExW SetSecurityInfo

shell32

SHGetFolderPathW ShellExecuteW

gdi32

GetViewportOrgEx SetViewportOrgEx CreateRectRgn GetClipRgn DeleteObject SelectObject GdiFlush SelectClipRgn BitBlt GetDIBits CreateSolidBrush DeleteDC CreateCompatibleDC CreateDIBSection RestoreDC CreateCompatibleBitmap SaveDC SetDIBitsToDevice

comdlg32

GetOpenFileNameW

ole32

CoUninitialize CoCreateInstance CoInitialize

winmm

PlaySoundW waveOutWrite sndPlaySoundA sndPlaySoundW waveOutOpen PlaySoundA

uxtheme

GetThemeAppProperties SetThemeAppProperties

Sharing

General

Malware Config

Signatures

File Explorer

330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f

shlwapi

dbghelp

user32

kernel32

ntdll

advapi32

shell32

gdi32

comdlg32

ole32

winmm

uxtheme

generic